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Abstract — E-mail security is the major issue for personal 
communication and business. E-mail is highly prone to various 
kind of attacks. The most common attack would be detected as 
Masquerading, Modification, Phishing, Denial of Service 
(DOS) and Spoofing. In order to provide security against these 
attacks, there are a number of tools have been proposed like 
Privacy Enhancement Mail (PEM), Pretty Good Privacy (PGP) 
and GnuPG, this tools are reportedly provide various security 
features like Data Integrity, Non-Repudiation, Encryption. But 
somewhere these features still fails to provide higher 
authentication and confidentiality. This paper is totally focused 
over the security issues that are still to be overcome after using 
the highly authenticated tools as mentioned above or any 
existing E-mail privacy tool. 

Index Terms — Authentication, confidentiality, data 
integrity, masquerading 


I. INTRODUCTION 

Securing the E-mail from an unauthorized access is the major 
issue now a days. 

E-mail is most widely used on smartphones among the user 
under the age of 18 to 44. It has observed that 33% of E-mails 
recipient opens the E-mail based solely on the subject line [1]. 
Today business is terrificallyran on electronic mails to 
correspond with client and colleagues. The E-mail servers are 
accepts, forward, deliver and store messages [2]. Neither the 
user nor their computers are supposed to be online 
simultaneously. When an E-mail messages is sent between 
two distant sites, it will be transit through dozens of machines 
on its way. Any of those machines can read the messages and 
could be record that for the future use. The internet is a vast 
network of computers, many of which are unprotected against 
malicious attacks from the time when it was composed to the 
time when it would be read. The protection of E-mail from 
unauthorized access and inspection is known as electronic 
privacy. 

II. PROBLEM DOMAIN 

E-mails are vulnerable to both i.e. passive attack and active 
attacks as well. Passive threats include release of message 
contents, and traffic analysis while active threats includes 
modification of message contents, Masquerade, replay and 
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Denial Of Services (DOS). Actually all the mentioned threats 
are applicable to the traditional E-mail protocols. [3] 

Today, life can’t be imagine without internet and E-mail is the 
most famous and useful feature of this technology, as it is used 
by various organization for their business affairs, we can say 
that it is used by almost every student and educational 
organization for transferring the information, regarding notes 
and any other personal affair. But this service mainly carries a 
problem i.e. Security and Privacy. E-mail is most popularly 
used over internet, hence greatest prone to attacks, even with 
the best designed E-mail filters. The intruders attack to access 
the private information of individuals. 

There are two types of attacks [ 1 ]:- 

1) Passive Attack: Here data is used by the intruder, but 

there is no harm done to network, it has two types : 

a) Releasing message. 

b) Traffic analysis. 

2) Active Attack: It is very dangerous as intruder affect 

the information by changing the content, 

modification and etc. 



Fig 1.1 Shows various attacks on E-mail 


E-mail in general completely insecure, the security issues 
include: 

• Invasion of privacy 

• Message Modification 

• Repudiation 

• False Messages 

• Identity Theft 

> Modification Attack: In this type of attack, the intruder 
makes changes and modifies the content. Then this content 
is send to the sender. 

> Masquerading Attack: Masquerading occurs when one 
person uses the identity of another to gain access to a 
computer. This can be done by a person or remotely. [2] 
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V Figure 1.2 shows that how a normal communication 

occurs between two users A and B, and the Attacker 
is continuously monitoring it. 

V Figure 1.3 shows that user B doesn’t know that he is 

communicating with the Attacker as he is thinking 
that he is communicating with the another user A. 

V Figure 1.4 shows that how the Attacker 

communicate with both the user (A and B) and 
they don’t have any clue that they are 
communicating with someone else. 

> Denial Of Service:A Denial of Service (DoS) attack 
usually either involves attackers sending messages to 
exploit certainvulnerabilities leading to the abnormality or 
paralysis of business systems, or sending a massive amount 
of regular messages quickly to a single node to run out the 
system resources resulting in business system failure. [3] 

> Distributed Denial Of Service:A Distributed Denial of 
Service (DDoS) attack is a DoS attack utilizing multiple 
distributed attack sources. Typically, the attackers use a 
large number of controlled bots (also referred to as 
zombies) distributed in different locations to launch a large 
number of DoS attacks against a single target or multiple 
targets. [3] 

> Phishing: Phishing is an attempt by an individual or a 
group to solicit personal information from unsuspecting 
user by employing social engineering techniques. Phishing 
E-mails are crafted to appear as if they have been sent from 
a legitimate organization or known individual. [4] 


III. PROPOSED SOLUTION 


The first step will be Digital Signature. [5] After that we are 
going to fragment the data into the size of 3 KB. The minimum 
size of data will be of 21 kb. After fragmentation[6] the next 
step would be Encryption, [7] in Encryption we are going to 
use three algorithms i.e. - DES, 2 DES, 3DES.[8] And the last 
stage will be Base 64 Conversion.[9] 

After using this algorithm all the issue regarding 
Confidentiality and Authentication will be solved and security 
will be more. 


Digital Signature 
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Encryption 


Figure: 1.5 Steps of Algorithm 


IV. CONCLUSION 

In this paper we proposed a new algorithm for securing Email 
Application by using Symmetric Key algorithms for 
optimising email privacy issues .Thus the various steps 
involved in this algorithm isto provide secure email service. 
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